Join EY and build a career that's as unique as you are. We offer global scale, support, and an inclusive culture to help you become your best. Your perspective is vital to making EY even better. Become part of an organization that builds an exceptional experience for you and a better working world for everyone.

As part of the EY NFS TPRM team, you'll empower clients to enhance their business performance by transforming strategies into actionable realities. Collaborate with high-performing EY teams to help clients grow, innovate, protect, and optimize their operations.

As an Associate Director in Risk Consulting, you will cultivate and strengthen internal and external relationships, identifying potential business opportunities for EY under the guidance of senior leadership. You'll enhance operational efficiency on projects and internal initiatives, ensuring high-quality project completion. On engagements, you will report to management, anticipating and identifying risks and proactively raising issues.

Further, you will foster a positive learning environment, coaching and mentoring junior team members. Your client responsibilities include leading Third Party Risk engagements, designing and implementing TPRM frameworks, conducting assessments, and guiding clients through the vendor lifecycle. You will also advise on fourth-party and supply chain risks, manage engagement financials, and drive business development initiatives. Building robust relationships with clients and internal EY services is key.

The ideal candidate will possess demonstrated experience in team leadership, business development, end-to-end account management, and leading multi-year delivery mandates. Hands-on expertise with TPRM tools such as ProcessUnity, ServiceNow, OneTrust, Prevalent, Archer, BitSight, or SecurityScorecard is essential. A strong grasp of regulatory frameworks including ISO 27001, NIST CSF, SOC 2, GDPR, CCPA, PCI DSS, HITRUST, HIPAA, ITIL, and GRC frameworks is required. Familiarity with vendor risk assessment methodologies, contract risk, emerging risks (cyber, AI/ML, ESG, geopolitical), and vendor due diligence, continuous monitoring, and fourth-party risk management is crucial.

Essential soft skills include strong interpersonal abilities, proven influencing and communication capabilities at all stakeholder levels, excellent written and presentation skills, and a high standard of integrity and work ethics. An academic background including a postgraduate degree is necessary, along with relevant professional qualifications such as CA, MBA, MCA, or MS. Certifications like CISA, CRISC, CISSP, or PMP are advantageous. Previous professional experience with other Big 4 or paneled SI/ITeS companies is expected.